HR 10606 — 119th Congress

FLAFO Act

Introduced Sep 24, 2026 Open for voting
Note: Bill summaries and components on this page are AI-generated and may contain errors. Always consult the original bill text and official sources before relying on this information.
← Open legislation
Click Vote to enable simultaneous voting.

Funding / Appropriations Top 4

DOJ funding conditioned on state ALPR restrictions

Makes states, local governments, and tribal governments ineligible for Department of Justice (DOJ) grants unless they adopt surveillance restrictions substantially similar to this Act's requirements, enforced through annual DOJ compliance certification.

  • Population Scope High Conditions apply to all states, units of local government, and Indian Tribes receiving Department of Justice (DOJ) grants — effectively nationwide reach across virtually all subnational governmental entities and their residents.
  • Budgetary Magnitude Medium Restricts access to existing DOJ grant streams — substantial recurring federal funding — but does not appropriate new funds or specify a dollar amount, making the magnitude significant but contingent on noncompliance.
  • Legal / Regulatory Depth High Creates a new statutory eligibility condition on DOJ grants and a new mandatory annual certification duty for the Attorney General, binding both federal and subnational actors through a new enforceable compliance regime.
  • Degree of Discretion Granted Low The Attorney General must annually certify compliance; 'must' and 'substantially similar' leave little interpretive room, and no rulemaking authority is delegated to vary the standard.
  • Implementation & Enforcement Burden Medium Requires recurring annual certification reviews across all grant-receiving jurisdictions, imposing a sustained administrative compliance workload on DOJ without standing up new adjudicatory infrastructure.
  • Temporal Commitment High Persists indefinitely until Congress acts to repeal or amend it.
No signal yet

Implementation & Enforcement Top 4

Criminal, civil penalties and private right of action for agencies

Imposes criminal penalties up to 5 years imprisonment and civil fines up to $100,000 on federal officers who violate the ALPR prohibition, and grants harmed individuals the right to sue — explicitly waiving sovereign and qualified immunity. Bans federal agencies from buying, operating, or accessing networked automated license plate reader (ALPR) systems and requires a warrant before any such access, with narrow exceptions for emergencies and terrorism investigations.

  • Population Scope Medium Directly affects all federal officers and employees who operate or access ALPR systems, plus any individual subjected to unlawful surveillance — a meaningful but bounded share of the population.
  • Budgetary Magnitude Low No funds are authorized or appropriated; civil penalties flow to plaintiffs rather than a federal account, and litigation costs are case-by-case rather than programmatic.
  • Legal / Regulatory Depth High Creates a new statutory prohibition with criminal and civil enforcement, a new private right of action, and expressly abrogates both sovereign immunity and qualified immunity — a fundamental restructuring of federal officers' legal exposure.
  • Degree of Discretion Granted Low Penalties and the private right of action are mandatory 'shall' obligations; no agency discretion is delegated over prosecution thresholds or immunity determinations.
  • Implementation & Enforcement Burden High Establishes parallel criminal prosecution, civil monetary liability, and private litigation channels against federal officers, requiring ongoing case-by-case adjudication across all three tracks.
  • Temporal Commitment High Same as above.
No signal yet

Regulatory or Legal Changes Top 4

Penalties on ALPR operators for unauthorized federal access

Makes it a crime — with up to 5 years imprisonment and fines up to $100,000 — for private operators of covered automated license plate reader (ALPR) systems to knowingly share data with federal agencies outside Act-permitted channels, with a private right of action for harmed individuals.

  • Population Scope Low Directly regulates private and commercial ALPR system operators — a small, specialized industry — and individuals whose plate data is unlawfully shared, a narrow and contingent population.
  • Budgetary Magnitude Low No federal funds are authorized or appropriated; civil penalties and damages flow to private plaintiffs, not a federal account.
  • Legal / Regulatory Depth High Imposes entirely new criminal and civil liability on private ALPR operators and creates a private right of action against them — extending federal enforcement reach into a commercial sector previously ungoverned by this statutory framework.
  • Degree of Discretion Granted Low Liability attaches to knowing violations under mandatory standards; no rulemaking delegation or agency discretion is granted over penalty levels or enforcement triggers.
  • Implementation & Enforcement Burden High Subjects a private industry to dual criminal prosecution and civil litigation, requiring operators to build compliance programs and courts to adjudicate cases on both tracks.
  • Temporal Commitment High Same as above.
No signal yet

Carve-outs, Exemptions, Eligibility Top 4

National security agency exemptions from ALPR prohibition

Excludes the Secret Service, U.S. Customs and Border Protection (CBP), and the Departments of Defense, Homeland Security, and Energy from the ALPR prohibition when conducting national security, border security, or facility protection activities.

  • Population Scope Low Directly affects only personnel of five named agencies — Secret Service, U.S. Customs and Border Protection (Excludes the Secret Service U.S. Customs and Border Protection (CBP)), and the Departments of Defense (DoD), Homeland Security (Department of Homeland Security (DHS)), and Energy (Department of Energy (DOE)) — conducting specified activities, a narrow governmental population.
  • Budgetary Magnitude Low No funds are authorized, appropriated, or restricted; the exemption adjusts legal authority, not spending.
  • Legal / Regulatory Depth Medium Constrains the Act's own prohibition by carving out named agencies for specified activities — a procedural boundary on an otherwise substantive mandate rather than a new statutory duty or enforceable entitlement.
  • Degree of Discretion Granted Medium Exempted agencies retain judgment over when their activities qualify as national security, border security, or facility protection, introducing operational discretion within the carve-out's scope.
  • Implementation & Enforcement Burden Low Creates no new compliance infrastructure; it removes an obligation rather than imposing one, leaving enforcement burden to the core prohibition for all non-exempted actors.
  • Temporal Commitment High Persists indefinitely until Congress acts to repeal or narrow it.
No signal yet

No possible riders have been surfaced for this bill.

Summary

The FLAFO Act restricts how federal agencies can use automated license plate reader (ALPR) systems — technology that scans and stores vehicle plate data — to address concerns about mass surveillance and constitutional rights. Among other elements, the bill * prohibits federal agencies from buying, operating, or accessing networked ALPR systems without a warrant, with narrow emergency exceptions; * imposes criminal and civil penalties on federal officers or employees who violate the prohibition; * waives sovereign immunity and qualified immunity so individuals can sue in federal court for violations; * penalizes private ALPR system operators who provide unauthorized access to federal agencies; * conditions Department of Justice (DOJ) grants to states, local governments, and tribes on those jurisdictions adopting similar restrictions; and exempts certain national security agencies from the prohibition for specified activities.

AI-generated summary, pending human review.

Full bill text rendering is coming soon.

In the meantime, read the full text on Congress.gov ↗.

Version Event Date User support Your vote Roll calls
Original
Initial publication
Sep 24, 2026
Sep 24, 2026 No votes yet — —

Funding / Appropriations Top 4

DOJ funding conditioned on state ALPR restrictions

Makes states, local governments, and tribal governments ineligible for Department of Justice (DOJ) grants unless they adopt surveillance restrictions substantially similar to this Act's requirements, enforced through annual DOJ compliance certification.

  • Population Scope High Conditions apply to all states, units of local government, and Indian Tribes receiving Department of Justice (DOJ) grants — effectively nationwide reach across virtually all subnational governmental entities and their residents.
  • Budgetary Magnitude Medium Restricts access to existing DOJ grant streams — substantial recurring federal funding — but does not appropriate new funds or specify a dollar amount, making the magnitude significant but contingent on noncompliance.
  • Legal / Regulatory Depth High Creates a new statutory eligibility condition on DOJ grants and a new mandatory annual certification duty for the Attorney General, binding both federal and subnational actors through a new enforceable compliance regime.
  • Degree of Discretion Granted Low The Attorney General must annually certify compliance; 'must' and 'substantially similar' leave little interpretive room, and no rulemaking authority is delegated to vary the standard.
  • Implementation & Enforcement Burden Medium Requires recurring annual certification reviews across all grant-receiving jurisdictions, imposing a sustained administrative compliance workload on DOJ without standing up new adjudicatory infrastructure.
  • Temporal Commitment High Persists indefinitely until Congress acts to repeal or amend it.
No signal yet

Funding / Appropriations

DOJ funding conditioned on state ALPR restrictions

Implementation & Enforcement Top 4

Criminal, civil penalties and private right of action for agencies

Imposes criminal penalties up to 5 years imprisonment and civil fines up to $100,000 on federal officers who violate the ALPR prohibition, and grants harmed individuals the right to sue — explicitly waiving sovereign and qualified immunity. Bans federal agencies from buying, operating, or accessing networked automated license plate reader (ALPR) systems and requires a warrant before any such access, with narrow exceptions for emergencies and terrorism investigations.

  • Population Scope Medium Directly affects all federal officers and employees who operate or access ALPR systems, plus any individual subjected to unlawful surveillance — a meaningful but bounded share of the population.
  • Budgetary Magnitude Low No funds are authorized or appropriated; civil penalties flow to plaintiffs rather than a federal account, and litigation costs are case-by-case rather than programmatic.
  • Legal / Regulatory Depth High Creates a new statutory prohibition with criminal and civil enforcement, a new private right of action, and expressly abrogates both sovereign immunity and qualified immunity — a fundamental restructuring of federal officers' legal exposure.
  • Degree of Discretion Granted Low Penalties and the private right of action are mandatory 'shall' obligations; no agency discretion is delegated over prosecution thresholds or immunity determinations.
  • Implementation & Enforcement Burden High Establishes parallel criminal prosecution, civil monetary liability, and private litigation channels against federal officers, requiring ongoing case-by-case adjudication across all three tracks.
  • Temporal Commitment High Same as above.
No signal yet

Implementation & Enforcement

Criminal, civil penalties and private right of action for agencies

Regulatory or Legal Changes Top 4

Penalties on ALPR operators for unauthorized federal access

Makes it a crime — with up to 5 years imprisonment and fines up to $100,000 — for private operators of covered automated license plate reader (ALPR) systems to knowingly share data with federal agencies outside Act-permitted channels, with a private right of action for harmed individuals.

  • Population Scope Low Directly regulates private and commercial ALPR system operators — a small, specialized industry — and individuals whose plate data is unlawfully shared, a narrow and contingent population.
  • Budgetary Magnitude Low No federal funds are authorized or appropriated; civil penalties and damages flow to private plaintiffs, not a federal account.
  • Legal / Regulatory Depth High Imposes entirely new criminal and civil liability on private ALPR operators and creates a private right of action against them — extending federal enforcement reach into a commercial sector previously ungoverned by this statutory framework.
  • Degree of Discretion Granted Low Liability attaches to knowing violations under mandatory standards; no rulemaking delegation or agency discretion is granted over penalty levels or enforcement triggers.
  • Implementation & Enforcement Burden High Subjects a private industry to dual criminal prosecution and civil litigation, requiring operators to build compliance programs and courts to adjudicate cases on both tracks.
  • Temporal Commitment High Same as above.
No signal yet

Regulatory or Legal Changes

Penalties on ALPR operators for unauthorized federal access

Carve-outs, Exemptions, Eligibility Top 4

National security agency exemptions from ALPR prohibition

Excludes the Secret Service, U.S. Customs and Border Protection (CBP), and the Departments of Defense, Homeland Security, and Energy from the ALPR prohibition when conducting national security, border security, or facility protection activities.

  • Population Scope Low Directly affects only personnel of five named agencies — Secret Service, U.S. Customs and Border Protection (Excludes the Secret Service U.S. Customs and Border Protection (CBP)), and the Departments of Defense (DoD), Homeland Security (Department of Homeland Security (DHS)), and Energy (Department of Energy (DOE)) — conducting specified activities, a narrow governmental population.
  • Budgetary Magnitude Low No funds are authorized, appropriated, or restricted; the exemption adjusts legal authority, not spending.
  • Legal / Regulatory Depth Medium Constrains the Act's own prohibition by carving out named agencies for specified activities — a procedural boundary on an otherwise substantive mandate rather than a new statutory duty or enforceable entitlement.
  • Degree of Discretion Granted Medium Exempted agencies retain judgment over when their activities qualify as national security, border security, or facility protection, introducing operational discretion within the carve-out's scope.
  • Implementation & Enforcement Burden Low Creates no new compliance infrastructure; it removes an obligation rather than imposing one, leaving enforcement burden to the core prohibition for all non-exempted actors.
  • Temporal Commitment High Persists indefinitely until Congress acts to repeal or narrow it.
No signal yet

Carve-outs, Exemptions, Eligibility

National security agency exemptions from ALPR prohibition